$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/b4533f27-95b4-3281-bca9-b634a4b0ce4d.roa File: b4533f27-95b4-3281-bca9-b634a4b0ce4d.roa (raw, json) Hash identifier: CQYFHL5wEaITBKz2SI0jk0ByInSTqRJNxYjnfuR2GwQ= Subject key identifier: 2C:6C:DD:63:62:04:6A:89:34:5A:9B:55:55:F7:64:F1:D0:88:9B:19 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584E815F952E10C13C7FE7F86060 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/b4533f27-95b4-3281-bca9-b634a4b0ce4d.roa Signing time: Wed 15 Jul 2026 09:00:13 +0000 ROA not before: Wed 15 Jul 2026 09:00:13 +0000 ROA not after: Tue 13 Oct 2026 09:00:13 +0000 asID: 6250 IP address blocks: 216.163.120.0/23 maxlen: 24 216.163.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:5f:95:2e:10:c1:3c:7f:e7:f8:60:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Jul 15 09:00:13 2026 GMT Not After : Oct 13 09:00:13 2026 GMT Subject: CN=1e39b6a3-f208-40e9-8641-dea628b5a829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3d:e4:f4:18:fa:f1:c8:c6:f4:63:0e:a4:38: cd:27:59:20:9f:ed:22:b9:51:6f:e3:fd:58:bb:5d: e6:f8:4e:5a:db:d9:17:9f:77:6d:b1:13:09:79:49: 92:d8:38:c5:ad:81:ad:48:1c:33:b8:e6:ba:5b:c3: 84:ec:8f:e8:85:cc:87:41:ec:31:90:79:aa:47:f6: 64:17:18:4f:20:10:4f:a0:ef:c5:30:bb:2a:4d:1e: 6c:d4:14:d7:7e:14:e8:0f:09:73:29:b5:a6:13:e0: 7b:eb:62:c9:a2:0d:52:eb:3a:79:81:19:19:bb:cd: 8f:cb:e1:23:fd:b1:3e:03:40:4a:6b:91:94:04:a2: b4:3e:b1:90:d9:f9:7a:1a:33:cd:6d:fa:66:54:ef: b3:ac:99:df:ab:25:3e:8e:8d:86:dd:02:0b:cf:2e: c2:bb:7c:81:f1:f8:39:e6:89:48:22:9c:4d:93:a4: b7:d7:6c:8a:a0:e5:4f:a9:2c:26:bf:e9:e3:8d:48: 56:05:d6:84:bf:3a:00:02:15:95:f1:69:cf:a7:d4: fe:61:ef:66:ef:b6:f7:0b:31:20:4e:c2:d6:54:5e: 52:7d:82:34:f7:18:b6:ac:ae:74:7c:a4:bd:3c:b4: 79:3e:d6:b7:44:4a:77:a6:76:6d:84:a9:6b:ce:13: d3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:6C:DD:63:62:04:6A:89:34:5A:9B:55:55:F7:64:F1:D0:88:9B:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/b4533f27-95b4-3281-bca9-b634a4b0ce4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 216.163.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:c9:27:e7:43:77:90:58:06:93:45:e5:d4:c7:42:ae:8a:e4: 9b:2c:77:5e:45:ad:68:a1:78:1d:ac:54:8d:6a:c9:f1:e8:f0: 4d:25:56:02:e1:83:b2:43:a7:31:23:fb:86:97:1f:9d:49:99: 2d:c5:74:51:8a:ee:47:e4:b1:f1:db:df:3b:d0:bf:57:78:16: 06:e4:2c:5c:3d:c0:26:3d:71:a3:11:cc:cf:a1:24:49:59:d7: fa:0b:1f:f7:59:0a:bc:b8:29:3b:df:74:1b:59:16:dd:62:6a: 63:78:d5:3d:de:ba:7b:25:a8:09:c6:be:e7:88:cd:4a:43:49: 5c:ec:1d:a0:6d:25:8e:8b:c9:a6:ca:ea:6b:db:74:97:28:31: ac:cb:25:20:2a:2b:a0:d8:f1:19:cb:d3:0f:7e:30:fe:e2:da: 69:a1:fd:38:c8:f1:31:18:69:8d:28:76:3b:ef:70:57:42:25: 6f:86:b9:39:27:63:5a:7b:18:7e:30:d0:bc:4d:c3:28:99:8f: 9c:6f:b4:51:55:84:81:88:51:d9:7c:ac:0f:ba:0c:e1:3b:79: 71:31:b3:3b:3a:24:af:30:7f:35:6f:84:12:b1:46:f5:6f:ee: 78:66:26:69:1b:a3:f0:63:fb:51:da:74:c3:c8:0b:e0:11:ec: 41:57:f2:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6BX5UuEME8f+f4YGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk MWUzOWI2YTMtZjIwOC00MGU5LTg2NDEtZGVhNjI4YjVhODI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT3k9Bj68cjG9GMOpDjNJ1kgn+0iuVFv4/1Y u13m+E5a29kXn3dtsRMJeUmS2DjFrYGtSBwzuOa6W8OE7I/ohcyHQewxkHmqR/Zk FxhPIBBPoO/FMLsqTR5s1BTXfhToDwlzKbWmE+B762LJog1S6zp5gRkZu82Py+Ej /bE+A0BKa5GUBKK0PrGQ2fl6GjPNbfpmVO+zrJnfqyU+jo2G3QILzy7Cu3yB8fg5 5olIIpxNk6S312yKoOVPqSwmv+njjUhWBdaEvzoAAhWV8WnPp9T+Ye9m77b3CzEg TsLWVF5SfYI09xi2rK50fKS9PLR5Pta3REp3pnZthKlrzhPTCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxs3WNiBGqJNFqbVVX3ZPHQiJsZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvYjQ1MzNmMjctOTViNC0z MjgxLWJjYTktYjYzNGE0YjBjZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2KN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrJJ+dDd5BYBpNF5dTHQq6K5Jssd15FrWiheB2sVI1qyfHo8E0lVgLh g7JDpzEj+4aXH51JmS3FdFGK7kfksfHb3zvQv1d4FgbkLFw9wCY9caMRzM+hJElZ 1/oLH/dZCry4KTvfdBtZFt1iamN41T3eunslqAnGvueIzUpDSVzsHaBtJY6LyabK 6mvbdJcoMazLJSAqK6DY8RnL0w9+MP7i2mmh/TjI8TEYaY0odjvvcFdCJW+GuTkn Y1p7GH4w0LxNwyiZj5xvtFFVhIGIUdl8rA+6DOE7eXExszs6JK8wfzVvhBKxRvVv 7nhmJmkbo/Bj+1HadMPIC+AR7EFX8i0= -----END CERTIFICATE-----Generated at Fri Jul 17 11:27:08 2026 by rpki-client